Orta CVSS 6.5
CVE-2023-27270: Netweaver Application Server Abap: denetimsiz kaynak tüketimi
Açıklama (NVD)
SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, has multiple vulnerabilities in a class for test purposes in which an attacker authenticated as a non-administrative user can craft a request with certain parameters, which will consume the server's resources sufficiently to make it unavailable. There is no ability to view or modify any information.
Özet bilgiler
- Ürün
- Sap Netweaver Application Server Abap
- CVSS v3.1
- 6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - EPSS
- %0,61 (yüzdelik 50)
- CWE
- CWE-400
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| sap-netweaver-application-server-abap | 700 | 700 | — |
| sap-netweaver-application-server-abap | 701 | 701 | — |
| sap-netweaver-application-server-abap | 702 | 702 | — |
| sap-netweaver-application-server-abap | 731 | 731 | — |
| sap-netweaver-application-server-abap | 740 | 740 | — |
| sap-netweaver-application-server-abap | 750 | 750 | — |
| sap-netweaver-application-server-abap | 751 | 751 | — |
| sap-netweaver-application-server-abap | 752 | 752 | — |
| sap-netweaver-application-server-abap | 753 | 753 | — |
| sap-netweaver-application-server-abap | 754 | 754 | — |
| sap-netweaver-application-server-abap | 755 | 755 | — |
| sap-netweaver-application-server-abap | 756 | 756 | — |
| sap-netweaver-application-server-abap | 757 | 757 | — |
| sap-netweaver-application-server-abap | 791 | 791 | — |